Category: Physical Security

SOC & Threat Management

, Assurance Portal SOC & Threat Management Search Search Entries: Clear Results 24/7 Managed Detection & Response (SOC / SIEM) A managed detection and response (MDR) capability provides continuous, around-the-clock monitoring, threat hunting, and escalation. Security telemetry from firewalls, intrusion detection/prevention, endpoints, and cloud is aggregated and correlated centrally (SIEM). Logs and critical files are [...]

Data Protection & Privacy

, Assurance Portal Data Protection & Privacy Search Search Entries: Clear Results Backup, Recovery & Resilience Critical systems and data are backed up with cross-region replication and immutable, encrypted storage. Recovery procedures are documented and tested, including periodic recovery testing. A disaster recovery plan defines priority applications and recovery objectives (RTO/RPO) and is independently reviewed. [...]

Application & Integration Security

, Assurance Portal Application & Integration Security Search Search Entries: Clear Results Application Access Governance Access to business and financial applications is provisioned through ticketed requests with documented approvals. Periodic user-access recertification reviews confirm access remains appropriate. Application change activity is tracked and evidenced for audit. Framework Alignment: NIST CSF PR.AA; CIS Control 6; CMMC [...]

Endpoint & Device Security

, Assurance Portal Endpoint & Device Security Search Search Entries: Clear Results Asset Management & Lifecycle A centralized IT asset management system tracks hardware and software inventory across devices, with lifecycle management and check-in/check-out, extended to printers, IoT, and infrastructure. Software installation is controlled — local administrative rights are restricted and new installations are routed [...]

Network Security

, Assurance Portal Network Security Search Search Entries: Clear Results Cloud & Platform Security Production infrastructure runs in a contracted, access-controlled colocation data center. Systems are maintained on supported operating-system versions, with end-of-life systems remediated. Infrastructure is monitored centrally with alerting, health dashboards, and aggregated logging. Framework Alignment: NIST CSF PR.IR, ID.AM; CIS Control 1; [...]

Cloud & Platform Security

, Assurance Portal Cloud & Platform Security Search Search Entries: Clear Results Asset Management & Lifecycle A centralized IT asset management system tracks hardware and software inventory across devices, with lifecycle management and check-in/check-out, extended to printers, IoT, and infrastructure. Software installation is controlled — local administrative rights are restricted and new installations are routed [...]

Identity & Access Management

, Assurance Portal Identity & Access Management Search Search Entries: Clear Results Least-Privilege & Role-Based Access Control System access is governed by access-management and least-privilege policies enforcing least privilege and role-based access control. Administrative privileges require documented justification with manager and security approval. Access rights are reviewed and recertified periodically, including annual access reviews for [...]

Governance, Risk & Compliance

, Assurance Portal Governance, Risk & Compliance Search Search Entries: Clear Results AI Governance & Acceptable Use Use of artificial intelligence is governed by an AI governance and acceptable-use policy, with organizational guidance covering acceptable use and the handling of sensitive data. Generative-AI access is provided through a managed enterprise account, and any new AI [...]

Third Party & Supply Chain Risk

, Assurance Portal Third Party & Supply Chain Risk Search Search Entries: Clear Results Governed Contractor & External-Workforce Access A defined external-workforce lifecycle framework governs contractor access. Remote and third-party access is restricted to compliant devices through Zero Trust and conditional-access controls. Third-party IT service delivery is consolidated into a single, tiered model with service-level [...]